filter.h 7.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287
  1. /* SPDX-License-Identifier: GPL-2.0 */
  2. /*
  3. * Linux Socket Filter Data Structures
  4. */
  5. #ifndef __TOOLS_LINUX_FILTER_H
  6. #define __TOOLS_LINUX_FILTER_H
  7. #include <linux/bpf.h>
  8. /* ArgX, context and stack frame pointer register positions. Note,
  9. * Arg1, Arg2, Arg3, etc are used as argument mappings of function
  10. * calls in BPF_CALL instruction.
  11. */
  12. #define BPF_REG_ARG1 BPF_REG_1
  13. #define BPF_REG_ARG2 BPF_REG_2
  14. #define BPF_REG_ARG3 BPF_REG_3
  15. #define BPF_REG_ARG4 BPF_REG_4
  16. #define BPF_REG_ARG5 BPF_REG_5
  17. #define BPF_REG_CTX BPF_REG_6
  18. #define BPF_REG_FP BPF_REG_10
  19. /* Additional register mappings for converted user programs. */
  20. #define BPF_REG_A BPF_REG_0
  21. #define BPF_REG_X BPF_REG_7
  22. #define BPF_REG_TMP BPF_REG_8
  23. /* BPF program can access up to 512 bytes of stack space. */
  24. #define MAX_BPF_STACK 512
  25. /* Helper macros for filter block array initializers. */
  26. /* ALU ops on registers, bpf_add|sub|...: dst_reg += src_reg */
  27. #define BPF_ALU64_REG(OP, DST, SRC) \
  28. ((struct bpf_insn) { \
  29. .code = BPF_ALU64 | BPF_OP(OP) | BPF_X, \
  30. .dst_reg = DST, \
  31. .src_reg = SRC, \
  32. .off = 0, \
  33. .imm = 0 })
  34. #define BPF_ALU32_REG(OP, DST, SRC) \
  35. ((struct bpf_insn) { \
  36. .code = BPF_ALU | BPF_OP(OP) | BPF_X, \
  37. .dst_reg = DST, \
  38. .src_reg = SRC, \
  39. .off = 0, \
  40. .imm = 0 })
  41. /* ALU ops on immediates, bpf_add|sub|...: dst_reg += imm32 */
  42. #define BPF_ALU64_IMM(OP, DST, IMM) \
  43. ((struct bpf_insn) { \
  44. .code = BPF_ALU64 | BPF_OP(OP) | BPF_K, \
  45. .dst_reg = DST, \
  46. .src_reg = 0, \
  47. .off = 0, \
  48. .imm = IMM })
  49. #define BPF_ALU32_IMM(OP, DST, IMM) \
  50. ((struct bpf_insn) { \
  51. .code = BPF_ALU | BPF_OP(OP) | BPF_K, \
  52. .dst_reg = DST, \
  53. .src_reg = 0, \
  54. .off = 0, \
  55. .imm = IMM })
  56. /* Endianess conversion, cpu_to_{l,b}e(), {l,b}e_to_cpu() */
  57. #define BPF_ENDIAN(TYPE, DST, LEN) \
  58. ((struct bpf_insn) { \
  59. .code = BPF_ALU | BPF_END | BPF_SRC(TYPE), \
  60. .dst_reg = DST, \
  61. .src_reg = 0, \
  62. .off = 0, \
  63. .imm = LEN })
  64. /* Short form of mov, dst_reg = src_reg */
  65. #define BPF_MOV64_REG(DST, SRC) \
  66. ((struct bpf_insn) { \
  67. .code = BPF_ALU64 | BPF_MOV | BPF_X, \
  68. .dst_reg = DST, \
  69. .src_reg = SRC, \
  70. .off = 0, \
  71. .imm = 0 })
  72. #define BPF_MOV32_REG(DST, SRC) \
  73. ((struct bpf_insn) { \
  74. .code = BPF_ALU | BPF_MOV | BPF_X, \
  75. .dst_reg = DST, \
  76. .src_reg = SRC, \
  77. .off = 0, \
  78. .imm = 0 })
  79. /* Short form of mov, dst_reg = imm32 */
  80. #define BPF_MOV64_IMM(DST, IMM) \
  81. ((struct bpf_insn) { \
  82. .code = BPF_ALU64 | BPF_MOV | BPF_K, \
  83. .dst_reg = DST, \
  84. .src_reg = 0, \
  85. .off = 0, \
  86. .imm = IMM })
  87. #define BPF_MOV32_IMM(DST, IMM) \
  88. ((struct bpf_insn) { \
  89. .code = BPF_ALU | BPF_MOV | BPF_K, \
  90. .dst_reg = DST, \
  91. .src_reg = 0, \
  92. .off = 0, \
  93. .imm = IMM })
  94. /* Short form of mov based on type, BPF_X: dst_reg = src_reg, BPF_K: dst_reg = imm32 */
  95. #define BPF_MOV64_RAW(TYPE, DST, SRC, IMM) \
  96. ((struct bpf_insn) { \
  97. .code = BPF_ALU64 | BPF_MOV | BPF_SRC(TYPE), \
  98. .dst_reg = DST, \
  99. .src_reg = SRC, \
  100. .off = 0, \
  101. .imm = IMM })
  102. #define BPF_MOV32_RAW(TYPE, DST, SRC, IMM) \
  103. ((struct bpf_insn) { \
  104. .code = BPF_ALU | BPF_MOV | BPF_SRC(TYPE), \
  105. .dst_reg = DST, \
  106. .src_reg = SRC, \
  107. .off = 0, \
  108. .imm = IMM })
  109. /* Direct packet access, R0 = *(uint *) (skb->data + imm32) */
  110. #define BPF_LD_ABS(SIZE, IMM) \
  111. ((struct bpf_insn) { \
  112. .code = BPF_LD | BPF_SIZE(SIZE) | BPF_ABS, \
  113. .dst_reg = 0, \
  114. .src_reg = 0, \
  115. .off = 0, \
  116. .imm = IMM })
  117. /* Indirect packet access, R0 = *(uint *) (skb->data + src_reg + imm32) */
  118. #define BPF_LD_IND(SIZE, SRC, IMM) \
  119. ((struct bpf_insn) { \
  120. .code = BPF_LD | BPF_SIZE(SIZE) | BPF_IND, \
  121. .dst_reg = 0, \
  122. .src_reg = SRC, \
  123. .off = 0, \
  124. .imm = IMM })
  125. /* Memory load, dst_reg = *(uint *) (src_reg + off16) */
  126. #define BPF_LDX_MEM(SIZE, DST, SRC, OFF) \
  127. ((struct bpf_insn) { \
  128. .code = BPF_LDX | BPF_SIZE(SIZE) | BPF_MEM, \
  129. .dst_reg = DST, \
  130. .src_reg = SRC, \
  131. .off = OFF, \
  132. .imm = 0 })
  133. /* Memory store, *(uint *) (dst_reg + off16) = src_reg */
  134. #define BPF_STX_MEM(SIZE, DST, SRC, OFF) \
  135. ((struct bpf_insn) { \
  136. .code = BPF_STX | BPF_SIZE(SIZE) | BPF_MEM, \
  137. .dst_reg = DST, \
  138. .src_reg = SRC, \
  139. .off = OFF, \
  140. .imm = 0 })
  141. /* Atomic memory add, *(uint *)(dst_reg + off16) += src_reg */
  142. #define BPF_STX_XADD(SIZE, DST, SRC, OFF) \
  143. ((struct bpf_insn) { \
  144. .code = BPF_STX | BPF_SIZE(SIZE) | BPF_XADD, \
  145. .dst_reg = DST, \
  146. .src_reg = SRC, \
  147. .off = OFF, \
  148. .imm = 0 })
  149. /* Memory store, *(uint *) (dst_reg + off16) = imm32 */
  150. #define BPF_ST_MEM(SIZE, DST, OFF, IMM) \
  151. ((struct bpf_insn) { \
  152. .code = BPF_ST | BPF_SIZE(SIZE) | BPF_MEM, \
  153. .dst_reg = DST, \
  154. .src_reg = 0, \
  155. .off = OFF, \
  156. .imm = IMM })
  157. /* Conditional jumps against registers, if (dst_reg 'op' src_reg) goto pc + off16 */
  158. #define BPF_JMP_REG(OP, DST, SRC, OFF) \
  159. ((struct bpf_insn) { \
  160. .code = BPF_JMP | BPF_OP(OP) | BPF_X, \
  161. .dst_reg = DST, \
  162. .src_reg = SRC, \
  163. .off = OFF, \
  164. .imm = 0 })
  165. /* Conditional jumps against immediates, if (dst_reg 'op' imm32) goto pc + off16 */
  166. #define BPF_JMP_IMM(OP, DST, IMM, OFF) \
  167. ((struct bpf_insn) { \
  168. .code = BPF_JMP | BPF_OP(OP) | BPF_K, \
  169. .dst_reg = DST, \
  170. .src_reg = 0, \
  171. .off = OFF, \
  172. .imm = IMM })
  173. /* Unconditional jumps, goto pc + off16 */
  174. #define BPF_JMP_A(OFF) \
  175. ((struct bpf_insn) { \
  176. .code = BPF_JMP | BPF_JA, \
  177. .dst_reg = 0, \
  178. .src_reg = 0, \
  179. .off = OFF, \
  180. .imm = 0 })
  181. /* Function call */
  182. #define BPF_EMIT_CALL(FUNC) \
  183. ((struct bpf_insn) { \
  184. .code = BPF_JMP | BPF_CALL, \
  185. .dst_reg = 0, \
  186. .src_reg = 0, \
  187. .off = 0, \
  188. .imm = ((FUNC) - BPF_FUNC_unspec) })
  189. /* Raw code statement block */
  190. #define BPF_RAW_INSN(CODE, DST, SRC, OFF, IMM) \
  191. ((struct bpf_insn) { \
  192. .code = CODE, \
  193. .dst_reg = DST, \
  194. .src_reg = SRC, \
  195. .off = OFF, \
  196. .imm = IMM })
  197. /* BPF_LD_IMM64 macro encodes single 'load 64-bit immediate' insn */
  198. #define BPF_LD_IMM64(DST, IMM) \
  199. BPF_LD_IMM64_RAW(DST, 0, IMM)
  200. #define BPF_LD_IMM64_RAW(DST, SRC, IMM) \
  201. ((struct bpf_insn) { \
  202. .code = BPF_LD | BPF_DW | BPF_IMM, \
  203. .dst_reg = DST, \
  204. .src_reg = SRC, \
  205. .off = 0, \
  206. .imm = (__u32) (IMM) }), \
  207. ((struct bpf_insn) { \
  208. .code = 0, /* zero is reserved opcode */ \
  209. .dst_reg = 0, \
  210. .src_reg = 0, \
  211. .off = 0, \
  212. .imm = ((__u64) (IMM)) >> 32 })
  213. /* pseudo BPF_LD_IMM64 insn used to refer to process-local map_fd */
  214. #define BPF_LD_MAP_FD(DST, MAP_FD) \
  215. BPF_LD_IMM64_RAW(DST, BPF_PSEUDO_MAP_FD, MAP_FD)
  216. /* Relative call */
  217. #define BPF_CALL_REL(TGT) \
  218. ((struct bpf_insn) { \
  219. .code = BPF_JMP | BPF_CALL, \
  220. .dst_reg = 0, \
  221. .src_reg = BPF_PSEUDO_CALL, \
  222. .off = 0, \
  223. .imm = TGT })
  224. /* Program exit */
  225. #define BPF_EXIT_INSN() \
  226. ((struct bpf_insn) { \
  227. .code = BPF_JMP | BPF_EXIT, \
  228. .dst_reg = 0, \
  229. .src_reg = 0, \
  230. .off = 0, \
  231. .imm = 0 })
  232. #endif /* __TOOLS_LINUX_FILTER_H */